Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images

North Korean threat actors linked to the Contagious Interview campaign used steganography in SVG image files to conceal malicious payloads. The campaign employed fake job postings and coding challenges. Users who ran the project received a four-stage payload aligned with OTTERCOOKIE, a browser credential and crypto wallet stealer, as well as a file stealer.